IT Risk Senior Associate

Responsibilities

• Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment
• Assist projects in the areas of IT General Control Assessments, Sarbanes‑Oxley Compliance, and potentially Cybersecurity Engagements
• Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business
• Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness
• Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
• Exhibit proficiency with creating internal controls process flows and risk/control matrices
• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques
• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
• Plan, review, and provide direction for the work of Staff and Senior Consultants
• Communicate extensively with clients to drive expectations and report on the status of ongoing projects
• Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership
• Stay abreast of emerging risk areas, IT trends, and related control techniques

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required
• 3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm. Experience should include performing internal or external IT audits
• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
• You have a passion for developing and maintaining client relationships
• You get the job done and have fun doing it
• You communicate skillfully with a variety of audiences and can create compelling stories from data
• You thrive in an ever-changing, dynamic work environment
• You readily identify problems and instinctively look for solutions
• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
• You have the ability and desire to travel as required based on client location